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ABSTRACT 



A method, system, and computer program product for test- 
ing enforcement of logical partitiomng in a data processing 
system is provided. In one embodiment, a call to an interface 
routine of a logical partitioning enforcement software unit is 
generated and sent to the logical partitioning enforcement 
software unit. A reply is received bom the logical partition- 
ing enforcement software unit and compared with an antici- 
pated reply. Responsive to a discrepancy between the reply 
and the anticipated reply, a user is notified of a problem, thus 
allowing the user to take appropriate actions to correct the 
problem. 
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METHODOLOGY TO STRESS AND TEST LPAR 
ISOLATION FEATURES 

BACKGROUND OF THE INVENTION 
[0001] 1. Technical Field 

[0002] The present invention relates generally to computer 
software and, more particularly, to stressing and testing 
logical partitioning features of a data processing system. 

[0003] 2. Description of Related Art 

[0004] A logical partitioning option (LPAR) within a data 
processing system (platform) aUows multiple copies of a 
single operating system (OS) or multiple heterogeneous 
operating systems to be simultaneously run on a single data 
processing system platform. A partition, within which an 
operating system image runs, is assigned a non-overlapping 
sub-set of the platform's resources. These platform allocable 
resources include one or more architecturally distinct pro- 
cessors with their interrupt management area, regions of 
system memory, and input/output (I/O) adapter bus slots. 
The partition's resources are represented by its own LPAR 
firmware device tree to the OS image. 

[0005] Each distinct OS or image of an OS running within 
the platform is protected from each other sudi that software 
errors on one logical partition can not affect the correct 
operation of any of the other partitions. This is provided by 
allocating a disjoint set of platform resources to be directly 
managed by each OS image and by providing mechanisms 
for ensuring that the various images can not control any 
resources that have not been allocated to it. Furthermore, 
software errors in the control of an OS*s allocated resources 
are prevented from affecting the resources of any other 
image. Thus, each image of the OS (or each different OS) 
directly controls a distinct set of allocable resources within 
the platform. 

[0006] Management of the partitioning may be different 
for different types of hardware. Some aspects of the parti- 
tioning is done in the hardware and some aspects are 
performed in the firmware which runs at a level more 
privileged than the privilege of the supervisory mode. One 
challenge in management of the partitions is in testing to 
make sure that the isolation and insulation of logical parti- 
tions is strictly enforced The consequence of failure of this 
partition isolation can be very expensive to users. Further- 
more, debugging this failure in the customer enviroiunent 
with production level operating systems and with all the 
customer applications can be extremely tedious and expen- 
sive if not impossible. Therefore, it would be advantageous 
to have a method, system, and apparatus for testing and 
stressing the hardware and firmware against malicious appli- 
cations to ensure that the isolation and insulation of the 
partitions are secure before an LPAR system fails. 

SUMMARY OF THE INVENTION 

[0007] The present invention provides a method, system, 
and computer program product for testing enforcement of 
logical partitioning in a data processing system. In one 
embodiment, a call to an interface routine of a logical 
partitioning enforcement software unit is generated and sent 
to the logical partitioning enforcement software unit. A reply 
is received from the logical partitioning enforcement soft- 
ware unit and compared with an anticipated reply. Respon- 



sive to a discrepancy between the reply and the anticipated 
reply, a user is notified of a problem, thus allowing the user 
to take appropriate actions to correct the problem. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0008] The novel feamres believed characteristic of the 
invention are set forth in the appended claims. The invention 
itself, however, as well as a preferred mode of use, further 
objectives and advantages thereof, will best be understood 
by reference to the following detailed description of an 
illustrative embodiment when read in conjunction with the 
accompanying drawings, wherein: 

[0009] FIG. 1 depicts a block diagram of a data processing 
system in which the present invention may be implemented; 

[0010] FIG. 2 depicts a block diagram of an exemplary 
logically partitioned platform in which die present invention 
may be implemented; 

[0011] FIG. 3 depicts a block diagram illustrating an 
LPAR testing unit in accordance with the present invention; 

[0012] FIG. 4 depicts a block diagram illustrating an 
exemplary exerciser in accordance with the present inven- 
tion; and 

[0013] FIG. 5 depicts a process flow and program func- 
tion for stressing and testing an LPAR system in accordance 
with the present invention. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENT 

[0014] With reference now to the figures, and in particular 
with reference to FIG. 1, a block diagram of a data pro- 
cessing system in which the present invention may be 
implemented is depicted. Data processing system 100 may 
be a symmetric multiprocessor (SMP) system including a 
plurality of processors 101, 102, 103, and 104 connected to 
system bus 106. For example, data processing system 100 
may be an IBM RS/6000, a product of International Busi- 
ness Machines Corporation in Armonk, N.Y., implemented 
as a server within a network. Alternatively, a single proces- 
sor system may be employed. Also connected to system bus 
106 is memory controller/cache 108, which provides an 
interface to a plurality of local memories 160-163. 1/0 bus 
bridge 110 is connected to system bus 106 and provides an 
interface to I/O bus 112. Memory controller/cache 108 and 
I/O bus bridge 110 may be integrated as depicted. 

[0015] Data processing system lOtp is a logically parti- 
tioned data processing system. TBixis, data processing system 
100 may have multiple heterogeneous operating systems (or 
multiple instances of a single operating system) running 
simultaneously. Each of these multiple operating systems 
may have any number of software programs executing 
within in it Data processing system 100 is logically parti- 
tioned such that different I/O adapters 120-121, 128-129. 
136, and 148-149 may be assigned to different logical 
partitions. 

[0016] Thus, for example, suppose data processing system 
100 is divided into three logical partitions, PI, P2, and P3. 
Each of I/O adapters 120-121, 128-129, 136, and 148-149. 
each of processors 101-104, and each of local memories 
160-164 is assigned to one of the three partitions. For 
example, processor 101, memory 160, and I/O adapters 120, 
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128, and 129 may be assigned to logical partition PI; 
processors 102-103, memory 161, and I/O adapters 121 and 
136 may be assigned to partition P2; and processor 104, 
memories 162*163, and I/O adapters 148-149 may be 
assigned to logical partition F3. 

[0017] Eacb operating system executing within data pro- 
cessing system 100 is assigned to a different logical parti- 
tion. Thus, each operating system executing within data 
processing system 100 may access only those I/O units that 
are within its logical partition. Thus, for example, one 
instance of the Advanced Interactive Executive (AIX) oper- 
ating system may be executing within partition PI, a second 
instance (image) of the AIX operating system may be 
executing within partition P2, and a Windows 2000 operat- 
ing system may be operating within logical partition PI. 
Windows 2000 is a product and trademark of Microsoft 
Corporation of Redmond, Wash. 

[0018] Peripheral component interconnect (PCI) Host 
bridge 114 connected to I/O bus 112 provides an interface to 
PCI local bus 115. A number of Input/Output adapters 
120-121 may be connected to PCI bus 115. Typical PCI bus 
implementations will support between four and eight I/O 
adapters (i.e. expansion slots for add-in connectors). Each 
I/O Adapter 120-121 provides an interface between data 
processing system 100 and input/output devices such as, for 
example, other network computers, which arc clients to data 
processing system 100. 

[0019] An additional PCI host bridge 122 provide an 
interface for an additional PQ bus 123. PQ bus 123 is 
connected to a plurality of PCI I/O adapters 128-129 by a 
PCI bus 126-127. Thus, additional I/O devices, such as, for 
example, modems or network adapters may t>e supported 
through each of PCI I/O adapters 128-129. In this manner, 
data processing system 100 allows comiections to multiple 
network computers. 

[0020] A memory mapped graphics adapter 148 may be 
connected to I/O bus 112 through PCI Host Bridge 140 and 
bridge 142 (PCI-PQ bridge) via PCI buses 141 and 144 as 
depicted. Also, a hard disk 150 may also be connected to I/O 
bus 112 through PQ Host Bridge 140 and bridge 142 via 
PCI buses 141 and 145 as depicted. 

[0021] A PCI host bridge 130 provides an interface for a 
pa bus 131 to connect to I/O bus 112. PCI bus 131 connects 
PCI host bridge 130 to the service processor maUbox 
interface and ISA bus access pass-through logic 194 and 
bridge 132. The ISA bus access pass- through logic 194 
forwards PCI accesses destined to the PCI/IS A bridge 193. 
The NV-RAM storage is connected to the ISA bus 196. The 
Service processor 135 is coupled to the service processor 
mailbox interface 194 through its local PCI bus 195. Service 
processor 135 is also connected to processors 101-104 via a 
plurality of JTAG/I^C buses 134. JTAG/I^C buses 134 are a 
combination of JTAG/scan busses (sec IEEE 1149.1) and 
Phillips I^C busses. However, alternatively, JTAG/I^C buses 
134 may be replaced by only Phillips I^C busses or only 
JTAG/scan busses. All SP-AITN signals of the host proces- 
sors 101, 102, 103, and 104 are connected together to an 
intermpt input signal of the service processor. The seivice 
processor 135 has its own local memory 191, and has access 
to the hardware op-panel 190. 

[0022] When data processing system 100 is initially pow- 
ered up, service processor 135 uses the JTAG/scao buses 



134 to interrogate the system (Host) processors 101-104, 
memory controller 108, and I/O bridge 110. At completion 
of this step, service processor 135 has an inventory and 
topology tmdcrstanding of data processing system 100. 
Service processor 135 also executes Built-In-Self-Tests 
(BlSTs), Basic Assurance Tests (BATs), and memory tests 
on all elements found by interrogating the system processors 
101-104, memory controller 108, and I/O bridge 110. Any 
error information for failures detected during the BISTs, 
BAI^, and memory tests are gathered and reported by 
service processor 135. 

[0023] K a meaningful/valid configuration of system 
resources is still possible after taking out the elements found 
to be faulty during the BISTs, BATs, and memory tests, then 
data processing system 100 is allowed to proceed to load 
executable code into local (Host) memories 160-163, Ser- 
vice processor 135 then releases the Host processors 101- 
104 for execution of the code loaded into Host memory 
160-163. While the Host processors 101-104 are executing 
code from respective operating systems within the data 
processing system 100, service processor 135 enters a mode 
of monitoring and reporting errors. The type of items 
monitored by service processor include, for example, the 
cooling fan speed and operation, thermal sensors, power 
supply regulators, and recoverable and non-recoverable 
errors reported by processors 101-104, memories 160-163, 
and bus-bridge controller HO. 

[0024] Service processor 135 is responsible for saving and 
reporting error information related to all the monitored items 
in data processing system 100. Service processor 135 also 
takes action based on the type of errors and defined thresh- 
olds. For example, service processor 135 may take note of 
excessive recoverable errors on a processor's cache memory 
and decide that this is predictive of a hard failure. Based on 
this determination, service processor 135 may mark that 
resource for decoofiguration during the current running 
session and future Initial Program Loads (IPLs). IPLs are 
also sometimes referred to as a "boot" or "bootstrap". 

[0025] Those of ordinary skill in the art will appreciate 
that the hardware depicted in FIG. 1 may vary. For example, 
other peripheral devices, such as optical disk drives and the 
like, also may be used in addition to or in place of the 
hardware depicted. The depicted example is not meant to 
imply architectural limitations with respect to the present 
invention, 

[0026] With reference now to FIG. 2, a block diagram of 
an exemplary logically partitioned platform is depicted in 
which the present invention may be implemented. The 
hardware in logically partitioned platform 200 may be 
implemented as, for example, server 100 in FIG. 1. Logi- 
cally Partitioned (LPAR) platform 200 includes partitioned 
hardware 230, LPAR Firmware (LF) 210, and operating 
systems 202-208. Operating systems 202-208 may be mul- 
tiple copies of a single operating system or multiple hetero- 
geneous operating systems simultaneously run on platform 
200. One or more of operating systems 202-208 may be a 
Test Nano Kernel (TnK) operating system. TnK is an OS 
meant specifically for creating an environment where stress 
exercisers can be written with ease and flexibility for speed, 
variation, and recreation of a failiffe. The TnK OS allows a 
programmer to create software and hardware irritations in a 
controlled manner to other partitions where another OS, 
such as, for example, AIX or Linux, is running. 
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[0027] Partitioned hardware 230 includes a plurality of 
processors 232-238, a plurality of system memory units 
240-246, a plurality of input/output (I/O) adapters 248-262, 
and a storage unit 270. Each of the processors 242-248, 
memory units 240-246, NV-RAM storage 298, and I/O 
adapters 248*262 may be assigned to one of multiple par- 
titions within logically partitioned platform 200, each of 
which corresponds to one of operating systems 202-208. 

[0028] LF 210 performs a number of functions and ser- 
vices for operating system images 202-208 to create and 
enforce the partitioning of logically partitioned platform 
200. Firmware is "software" stored in a memory chip that 
holds its content without electrical power, such as, for 
example, read-only memory (ROM), programmable ROM 
(PROM), erasable programmable ROM (EPROM), electri- 
cally erasable programmable ROM (EEPROM), and non- 
volatile random access memory (non-volatile RAM). 

[0029] LF 210 is a firmware implemented virtual machine 
identical to the underlying hardware. Thus, LF 210 allows 
the simultaneous execution of independent OS images 202- 
208 by virtu ahzing all the hardware resources of logically 
partitioned platform 200. LF 210 may attach I/O devices 
through I/O adapters 248-262 to single virtual machines in 
an exclusive mode for use by one of OS images 202-208. 

[0030] OS 202-208 includes an LPAR testing unit 222- 
228. LPAR testing unit 222-228 generates and sends 
requests to the LPAR hardware and LF 210 attempting to 
access facilities assigned to a different partition. These 
requests are generated and sent by LPAR testing units 
222-228 as rapidly as possible in an attempt to stress the 
system to determine whether any problems exist with the 
system which may cause a failure of the LPAR hardware or 
LF 210 which enables unauthorized access to a partition. 
Thus, LPAR testing unit 222-228 verifies under stress that 
the no violations of the isolation and insulation aspects of 
LPAR are violated by LPAR hardware by malicious appli- 
cations. Thus ensuring that the LPAR hardware does not 
allow access to non-permitted resources. LPAR testing unit 
222-228 also verifies, under stress, that the LF 210 does no 
allow malicious appHcations to gain access to non permitted 
resources. If non-permitted access is granted by the LF 210, 
this indicates that there is a software bug that must be 
identified and corrected. Therefore, if the LPAR hardware or 
the LF 210 does allow a non-permitted access, then a tiser 
or debug routine is notified that there is a problem with the 
logical partitioning in the system. The user or debug routine 
may then attempt to identify the problem such that it may be 
corrected. 

[0031] Each OS 202-208 is modified, if necessary, to run 
under an LPAR system such that it relinquishes all LF 210 
mode facilities and instead makes system calls to the LF 210 
to access or manage the following facilities: hardware 
dependent registers (HID), logical partition definition reg- 
isters, support processor communication registers, special 
purpose register for general purpose, time base registers, 
data address breakpoint register, address space register, 
machine check enable bit in the Machine State Register 
(MSR), LF mode enable bit in MSR, and page table pointer 
register. In one exemplary partition mode, all interrupts 
except System Call Vectored (SCV) are sent to LF 210. In 
another exemplary partition mode, all interrupts except 
machine check, reset, and system calls with bit 20 on, are 



sent to the LPAR vector. The LPAR vector is the interrupt 
vector of a partition. OS's 202-208 are enabled to boot in a 
partition and manage the following facilities through LF 
210: page table entries, support processor communication 
registers, special purpose register for general purpose, time 
base registers, data address breakpoint register, address 
space register, and LF 210 managed machine state register 
bits. 

[0032] In some embodiments, one of OS^s 202-208 is TnK 
while other ones of OS's 202-208 are other types of OS's, 
such as, for example, AIX or Linux, that may be typically 
used for commercial appHcations. TnK is capable of making 
performing actions that many other types of OS's are not 
capable of, thus allowing a greater stress to be placed on the 
system in determining whether the logical partitioning is 
strictly enforced by the LF 210 and hardware. 

[0033] Those of ordinary skill in the art will appreciate 
that the hardware depicted in FIG. 2 may vary. For example, 
although depicted with an LPAR test unit in each partition's 
OS, in some embodiments, the LPAR test unit may be 
implemented in less than all the partitions. Furthermore, 
some embodiments may include other or different hardware 
fi-om that depicted in FIG. 2. Also, some embodiments may 
also include unpartitioned hardware. The depicted example 
is not meant to imply architectural limitations with respect 
to the present invention. 

[0034] With reference now to FIG. 3, a block diagram 
illustrating an LPAR testing unit is depicted in accordance 
with the present invention. LPAR testing unit 300 may be 
implemented as, for example, any of LPAR testing units 
222-228 in FIG. 2. LPAR testing unit 300 includes Test for 
Storage Model (TPSM) exerciser 302, cachestress exerciser 
304 (a methodical stress test for cache chips), branch exer- 
ciser 306 (a methodical stress test for the branch unit), IFU 
exerciser 308 (a methodical test for the Instruction fetch 
unit), Monty exerciser 310 (a stress test for 10 subsystem 
relative to the CEC), and DABR exerciser 312 (a methodical 
stress test for the Data Access Breakpoint register). LPAR 
testing unit 300 also includes a special exerciser 314. 

[0035] Furthermore, there are other exercisers 316-320 
designed specifically to go outside the partition. Txecrashes 
exerciser 316 pseudo-randomly stresses invahd accesses 
outside of its partition. Txeeffaddr exerciser 318 methodi- 
cally stresses invahd accesses outside of its partition. 
TxelOcrashcs exerciser 320 stress tests the behavior of a 
misbehaved 10 card in a partition. 

[0036] All of these exercisers 302-320 run concurrently 
and, thus, produce a tremendous amount of stress on the 
LPAR firmware, such as LF 210 in FIG. 2, that manages the 
logical partitiooiag. The same LPAR firmware is used simul- 
taneously by the other OS's in other partitions in the 
logically partitioned system. The amount of stress and 
variation of paths to the LPAR firmware in this heteroge- 
neous environment is increased substantially with the pres- 
ence of the LPAR testing imit 300 and its exercisers 302- 
320. 

[0037] The OS in which the LPAR tesdng unit 300 runs 
should allow the exercisers 302-312 to create their own 
environment by allowing each exerciser 302-312 to: select 
between translation types RS6000 virtual and AS400PLS/ 
SLS; translate data and or instructions; select supervisory or 
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problem mode, select 32 bit mode or 645 bit mode in MSR; 
create page table entries using the LPAR firmware; access 
hardware implementation dependent resources through the 
LPAR firmware; allocate any amount of contiguous real 
memory on any boundary; attach the memory to any effec- 
tive address; manipulate segment registers, segment looka- 
side buffer (sib), or segment table as desired; and define its 
own interrupt vector. The operating system TnK inherently 
provides this feature. By allowing each exerciser 302-312 to 
create its own environment, each exerciser 302-312 may 
manipulate any memory with any boundary condition with 
many different instruction sequences and check that it does 
not violate any LPAR rules of memory accesses or of other 
resources. These accesses could either by directly through 
hardware or through the LPAR firmware managing the 
software controlled aspects of the logical partitioning. 

[0038] In order to stress the LPAR firmware interface 
further, LPAR testing unit 300 includes special exerciser 314 
to be used in conjunction with exercisers 302-312. Special 
exerciser 314 calls all the documented and undocumented 
LPAR firmware interface calls in the following manner: 

[0039] call the interface routine with pseudo random 
valid values; 

[0040] call the interface routine with pseudo random 
invalid values; and 

[0041] pseudo randomly attempt to call all invalid or 
nonexistent interface routines. Interface routines are 
identified by the LPAR firmware by virtue of a 
passed value in a register. Only certain values are 
valid; others are invalid or non-existent interface 
routines. It is pseudo randomly determined whether 
the routines will be called with valid or invalid 
values or whether an attempt to call an invalid 
routine will be made. All of these routine caUs are 
made in a very ef&cient and rapid rate to make sure 
there is enou^ stress on the LPAR firmware which 
is also being used by OS's from other partitions. 
However the rate of generation is implementation 
dependent and varies depending on, for example, the 
speed of the processor utilized. 

[0042] Those of ordinary skill in the art will appreciate 
that the components depicted in FIG. 3 may vary. Therefore, 
the depicted example is not meant to imply architectural 
limitations with respect to the present invention. 

[0043] With reference now to FIG. 4, a block diagram 
illustrating an exemplary exerciser is depicted in accordance 
with the present invention. Exerciser 400 may be imple- 
mented as, for example, any of exercisers 302-320 in FIG. 
3. Exerciser 400 includes a pseudo random value generator 
402, called routine determination unit 404, an interface 
routine calling unit 406, a comparison unit 408, a receiver 
410, and a notification unit 412. 

[0044] Called routine determination uinil 404 pseudo ran- 
domly determines whether an invalid/nonexistent or vaUd 
LPAR firmware interface routine or other software or hard- 
ware routine will be called. If an invalid routine is chosen, 
called routine determination unit 404 generates a routine 
name and value to be called. If a valid routine is chosen, 
called routine determination unit 404 pseudo randomly 
determines whether a valid or invalid value wUl be used in 
calling the routine. 



[0045] Pseudo random value generator generates a valid or 
invalid value, depending on the choice made by called 
routine determination unit 404, to be used when calling the 
routine. Interface routine calliog unit 405 calls the selected 
valid or invalid interface routine from the LPAR firmware, 
LPAR hardware, or other LPAR software. Receiver 410 
receives results from the called unit or other associated unit 
and comparison unit 408 compares the results with expected 
results. Notification unit 412 notifies an LPAR testing unit of 
any problems encountered. 

[0046] For example, if the comparison imit 408 deter- 
mines that the results indicate that access to a partition 
allocated to another partition was granted, then the notifi- 
cation unit 412 will send a notification to the LPAR testing 
unit indicating a breach in the enforcement of the logical 
partitioning. The notification unit 412 may also include a 
description of the type of problem encountered. For 
example, the problem may be that the LPAR firmware denies 
access to facility when it should not, allows access to a 
facility when it should not, or produces unexpected results 
or allows access to f acOities when presented with a call to an 
invalid routine. Once a problem has been identified and, 
perhaps the nature of the problem, then an administrator may 
utilize a debugging routine to locate the software problem 
within the LPAR firmware or locate the problem with one a 
malfunctioning LPAR hardware device. 

[0047] Those of ordinary skill in the art will appreciate 
that the components depicted in FIG. 4 may vary. Therefore, 
the depicted example is not meant to imply architectural 
limitations with respect to the present invention. 

[0048] With reference now to FIG. 5, a process fl^ow and 
program function for stressing and testing an LPAR system 
is depicted in accordance with the present invention. The 
processes and functions illustrated in FIG. 5 may be imple- 
mented in, for example, exerciser 400 in FIG. 4. To begin, 
the exerciser pseudo randomly determines whether a call 
will be made to the LPAR unit using a valid or invalid 
interface routine (step 502). If an invalid routine is selected, 
then an invalid interface routine name and argument values 
are generated (Step 520). The exerciser then calls the LPAR 
unit using the invahd routine name (step 510). 

[0049] If a valid routine is selected, then the exerciser 
pseudo randomly selects a valid interface routine name to be 
called (step 504). Next, it is determines whether a valid or 
invalid value wiU be used as the argument of the interface 
routine (step 506). If a valid value is selected as the 
argument of the interface routine, then the exerciser pseudo 
randomly generates a valid value (step 508). If an invalid 
value is selected, then an invalid argument value is pseudo 
randomly generated (step 522). Once the argument value has 
been generated, the selected LPAR system routine or hard- 
ware is called using the selected argument values (step 510). 

[0050] The special exerciser then awaits and receives 
results from the called LPAR unit or an associated LPAR 
unit (step 512). These results arc compared with anticipated 
results (step 514). For example, if the exerciser attempted to 
access resources belonging to a different partition, it would 
be anticipated that access would be denied. If the received 
results match the anticipated results (step 516), then no 
further action is taken and the exerciser begin anew with step 
502 in continiuQg to stress and test the LPAR firmware. 
However, if the received results are different from the 
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anticipated results (step 5 Id), then the LPAR tester is 
notified of Ihc problem (step 518) thus allowing corrective 
action to be taken. The processes illustrated in FIG. 5 are 
performed repeatedly as rapidly as desired (preferably as 
rapidly as possible) in an attempt to increase or maximize 
the stress on the LPAR firmware, LPAR hardware, and/or 
other LPAR resources and detennine any weaknesses. The 
process continues until a user or other software determines 
that sufficient testing of the LPAR firmware has been per- 
formed. 

[0051] It is important to note that while the present inven- 
tion has been described in the context of a fully functioning 
data processing system, those of ordinary skill in the art will 
appreciate that the processes of the present invention are 
capable of being distributed in the form of a computer 
readable medium of instructions and a variety of forms and 
that the present invention applies equally regardless of the 
particular type of signal bearing media actually used to carry 
out the distribution. Examples of computer readable media 
include recordable-type media, such as a floppy disk, a hard 
disk drive, a RAM, CD-ROMs, DVD-ROMs, and transmis- 
sion-type media, such as digital and analog communications 
links, wired or wireless communications links using trans- 
mission forms, such as, for example, radio frequency and 
light wave transmissions. The computer readable media may 
take the form of coded formats that are decoded for actual 
use in a particular data processing system. 

[0052] The description of the present invention has been 
presented for purposes of illustration and description, and is 
not intended to be exhaustive or limited to the invention in 
the form disclosed. Many modifications and variations will 
be apparent to those of ordinary skill in the art. The 
embodiment was chosen and described in order to best 
explain the principles of the invention, the practical appli- 
cation, and to enable others of ordiaary skill in the art to 
understand the invention for various embodiments witb 
various modifications as are suited to the particular use 
contemplated. 

What is claimed is: 

1. A method of testing enforcement of logical partitioning 
in a logically partitioned data processing system, the method 
comprising: 

generating a call to a unit within the logically partitioned 
data processing system; 

receiving a reply from the unit; 

comparing the reply with an anticipated reply; and 

responsive to a discrepancy between the reply and the 
anticipated reply, notifying a user of a problem. 

2. The method as recited in claim 1, wherein the unit is an 
interface routine of a logical partitioning enforcement soft- 
ware unit. 

3. The method as recited in claim 1, wherein the tmit is in 
a different partition from the partition from which the call to 
the unit is generated. 

4. The method as recited in claim 1, wherein the unit is a 
hardware device. 

5. The method as recited in claim 2, wherein generating 
a call to an interface routine comprises: 

randomly selecting one of a valid interface routine and an 
invalid interface routine; and 

generating a call to the chosen interface routine. 



6. The method as recited in claim 5, wherein randomly 
selecting comprises pseudo randomly selecting. 

7. The method as recited in claim 2, wherein generating 
a call to an interface routine comprises: 

randomly selecting one of a valid interface routine argu- 
ment value and an invalid interface routine argument 
value; 

responsive to selection of the vaUd interface routine 
argument value, randomly generating a valid interface 
argument value; 

responsive to selection of the invalid interface routine 
argument value, randomly generating an invalid inter- 
face argument value; and 

calling the interface routine using the generated interface 
argimieot value. 

8. The method as recited in claim 7, wherein randomly 
selecting comprises pseudo randomly selecting. 

9. The method as recited in claim 7, wherein randomly 
generating a valid interface argument value comprises 
pseudo randomly generating a valid interface argument 
value. 

10. TTie method as recited in claim 7, wherein randomly 
generating an invalid interface argument value comprises 
pseudo randomly generating an invalid interface argument. 

11. A method for testing enforcement of logical partition- 
ing in a logically partitioned data processing system, the 
method comprising: 

repeatedly generating calls to one or more of a pluraUty of 
units within the logically partitioned data processing 

system; 

receiving responses to the caUs firom the one or more of 
the plurality of tmits; and 

generating an alert if one or more responses is inconsis- 
tent with expected responses. 

12. A computer program product in a computer readable 
media for use in a logically partitioned data processing 
system for testing enforcement of logical partitioning in the 
logically partitioned data processing system, the computer 
program product comprising: 

generating instructions for generating a call to a unit 
within the logically partitioned data processing system; 

receiving instructions for receiving a reply from the unit; 

comparing instructions for comparing the reply with an 
anticipated reply; and 

notification instructions, responsive to a discrepancy 
between the reply and the anticipated reply, for noti- 
fying a user of a problem. 

13. The computer program product as recited in claim 12, 
wherein the unit is an interface routine of a logical parti- 
tioning enforcement software unit. 

14. The computer program product as recited in claim 12, 
wherein the unit is assigned to a different partition from the 
partition from which the call to the unit is generated. 

15. The computer program produa as recited in claim 12, 
wherein the generating instructions comprise: 
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selecting instructions for randomly selecting one of a 
valid interface routine and an invalid interface routine; 
and 

call generating instructions for generating a call to the 
chosen interface routine. 

16. The computer program product as recited in claim 15, 
wherein randomly selecting comprises pseudo randomly 
selecting. 

17. The computer program product as recited in claim 12, 
wherein the generating instructions comprise: 

interface selection instructions for randomly selectiog one 
of a valid interface routine aigument value and an 
invalid interface routine argument value; 

valid argument instructions, responsive to selection of the 
valid interface routine argument value, for randomly 
generating a valid interface argument value; 

invalid argument instructions, responsive to selection of 
the invalid interface routine argument value, for ran- 
domly generating an invalid interface argument value; 
and 

interface calling instructions for calling the interface 
routine using the generated interface argument vahie. 

18. The computer program product as recited in claim 17, 
wherein randomly selecting comprises pseudo randomly 
selecting. 

19. The computer program product as recited in claim 17, 
wherein randomly generating a valid interface argument 
value comprises pseudo randomly generating a valid inter- 
face argument value, 

20. The computer program product as recited in claim 17, 
wherein randomly generating an invalid interface argument 
value comprises pseudo randomly generating an invalid 
interface argument. 

21. A computer program product in a computer readable 
media for use in a logically partitioned data processing 
system for testing enforcement of logical partitioning in the 
logically partitioned data processing system, the computer 
program product comprising: 

generating instructions for repeatedly generating calls to 
one or more of a plurality of units within the logically 
partitioned data processing system; 



receiving instructions for receiving responses to the calls 
from the one or more of the phirality of units; and 

alerting instructions for generating an alert if one or more 
responses is inconsistent with expected responses. 

22. A logical partitioning testing system for tesdng 
enforcement of logical partitioning in a logically partitioned 
data processing system, the system comprising: 

a call generating unit which generates a call to a tmit 
within the logically partitioned data processing system; 

a receiver which receives a reply from the unit; 

a comparison imit which compares the reply with an 
anticipated reply; and 

notifying unit which, responsive to a discrepancy between 
the reply and the anticipated reply, notifies a user of a 
problem. 

23. The system as recited in claim 22, wherein the unit is 
an interface routine of a logical partitioning enforcement 
software unit. 

24. The system as recited in claim 22, wherein the unit is 
in a different partition from the partition from which the call 
to the unit is generated. 

25. The system as recited in claim 22, wherein the unit is 
a hardware device, 

26. A logical partitioning testing system for testing 
enforcement of logical partitioning in a logically partitioned 
data processing system, the system comprising: 

a call generating unit which repeatedly generates calls to 
one or more of a plurality of units within the logically 
partitioned data processing system; 

a receiver which receives responses to the calls from the 
one or more of the plurality of units; and 

an alert generating unit which generates an alert if one or 
more responses is iQconsistent with expected 
responses. 

***** 
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